udev libexecs dynamically populate udev rules.
/etc/alternatives/*iptables* is iptables_exec_t
console_init manages syscondif files.

At first I thought I should split out this
axx, but decided against it.  While I generally
hate giving manage axx to etc_t, it is udev. udev
has much more interesting axx than manage or etc_t
out of necessity.
Enhancements for CLIP dracut module.

Wrap live media-specific code in getarg checks.

Fix / labelin case rescue mode changed the label
to mnt_t.
Allow users to pass livecd-creator args.

It is nice to be able to debug ks %post scripts
for live media or generally muck with things at that
end of %post to test changes etc.  Add LIVECD_ARG
propagation from top-level.  Now you can do, e.g.,
make clip-rhel6-live-iso LIVECD_ARGS="--shell" to
get a shell in the chroot.
Allow auditctl to inherit kernel fds.